li...@mgreg.com wrote: > Hi All, > > Having a bit of a problem wrapping my head around a particular network setup. > Basically the scenario is as follows: > > -- 1 ISP (Cable Internet Provider) > -- 5 Available static IPs > -- 1 Cable Modem > -- 1 Generic PC with 2 NICs (running pfSense) > -- 1 Gigabit Switch with 20+ PCs connected > > > The current physical setup is as follows: > > ISP (5 STATIC IPs) --> CABLE MODEM --> pfSense Box (2 NICs) --> 32-port Gb > Switch --> 20+ PCs > > > I need to be able to do each of the following: > > 1) Connect a router downstream from the pfSense box to use 1 of the 5 > available IPs -- so as to segregate networks > 2) Route all traffic from 2 of the 5 available static IPs to a single PC > whilst maintaining their "internal" (10.0.0.x) status. > > I'm not really sure what I need to be looking into for this -- VLANs, BGP, > General Multihoming, NAT? Do I need more hardware? Be as descriptive as you > deem necessary. > > Currently the entire network is just running off a single static IP address > (i.e. a run-of-the-mill cable internet setup with pfSense box as the router) > > > > Best, > > Michael > > Not sure what you are going to use the second box for or why, but I would consider putting a switch between the cable modem and pfsense and just use on of the static ip addresses directly and not put that traffic through the existing pfsense box.
We do that for one of our larger clients and provide views in dns so that the internal pc's get different ip address for mail or the company website so that traffic never hits the routable ip addresses. The webserver and mail servers are dual homed with external and internal ip addresses. Lyle --------------------------------------------------------------------- To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org
